AMENDMENT TO CLAIMS: 



1. (Currently Amended) A method for creating anonymity in collecting patient data, the 
method comprising: 

receiving a medical report for a patient including patient identification data; 

searching a patient record corresponding to said patient for an anonymous patient 
identifier wherein said patient record includes one or more of the patient identification data, said 
searching returns said anonymous patient identifier in response to locating said anonymous 
patient identifier and said searching returns a null value in response to not locating said 
anonymous patient identifier; 

creating said anonymous patient identifier corresponding to said patient, wherein said 
anonymous patient identifier includes a linear transformation of a media access control address 
component, a date/tune component and an anonymity supplement component; and 

storing the anonymous patient identifier in the patient record if said searching returns said 
null value; 

adding said anonymous patient identifier to said medical report; 
removing said patient identification data from said medical report; and 
transmitting said medical report to a data repository in response to said removing. 

2. (Currently Amended) The method of claim 1 wherein said anonymous patient 
identifier includes a linear transformation of a media access control address component, a 
dat e /time compon e nt and an anonymity supplement component includes a random number and a 
constant . 

3. (Currently Amended) The method of claim IS wherein said date/time component 
includes a month, a day, a year, an hour, a minute, and a second corresponding to when said 
patient was first admitted. 
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4. (Currently Amended) The method of claim 2 wherein said anonymity supplement 
component further includes a rotating number that is incremented between a minimum and a 
maximum value each time a new said anonymity supplement is create d, and returning to said 
minimum value when said rotating number is incremented to the maximum value . 

5 . (Currently Amended) The method of claim 12 wherein said linear transformation 
includes a non-singular matrix. 

6. (Original) The method of claim 5 wherein said matrix is a three by three matrix. 

7. (Original) The method of claim 5 wherein said matrix is a four by four matrix. 

8. (Original) The method of claim 5 wherein said matrix is an n by n matrix. 

9. (Original) The method of claim 1 wherein said patient identification data includes one 
of name, medical record number and social security number. 

10. (Original) The method of claim 1 wherein said anonymous patient identifier is in an 
encrypted format on said patient record. 

1 1 . (Original) The method of claim 1 wherein said anonymous patient identifier is in a 
unencrypted format on said medical report. 

12. (Currently Amended) The method of claim 1 wherein said creating and storing 
include: 

receiving a -said m edia access control address; 

applying a first linear transformation matrix to said media access control address 
resulting in a transformed media access control address; 

receiving a rsaid date/time; 

applying a second linear transformation matrix to said date/time resulting in a 
transformed date/time; 

receiving an -said anonymity supplement; 
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applying a third linear transformation matrix to said anonymity supplement resulting in a 
transformed anonymity supplement concatenating said transformed media access control 
address, said transformed date/time and said transformed anonymity supplement resulting in said 
anonymous patient identifier; 

encrypting said anonymous patient identifier resulting in an encrypted anonymous patient 
identifier; and 

storing said encrypted anonymous patient identifier in said patient record. 

13. (Original) The method of claim 12 wherein said first linear transformation matrix, 
said second linear transformation matrix and said third linear transformation matrix are the same 
matrices. 

14. (Original) The method of claim 12 wherein two of said first linear transformation 
matrix, said second linear transformation matrix and said third linear transformation matrix are 
different matrices. 

15. (Currently Amended) A method for creating anonymity in collecting patient data, 
the method comprising: 

receiving a medical report for a patient including patient identification data; 

searching a patient record corresponding to said patient for an anonymous patient 
identifier wherein said patient record includes one or more of the patient identification data, said 
searching returns said anonymous patient identifier in response to locating said anonymous 
patient identifier and said searching returns a null value in response to not locating said 
anonymous patient identifier; 

creating said anonymous patient identifier corresponding to said patient if said searching 
returns said null value, wherein said creating includes: 

receiving a media access control address; 
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applying a first linear transformation matrix to said media access control address 
resulting in a transformed media access control address; 

receiving a date/time , said date/time indicating when said patient data was 

created ; 

applying a second linear transformation matrix to said date/time resulting in a 
transformed date/time; 

receiving an anonymity supplement; 

applying a third linear transformation matrix to said anonymity supplement 
resulting in a transformed anonymity supplement; 

concatenating said transformed media access control address, said transformed date/time 
and said transformed anonymity supplement resulting in said anonymous patient identifier; 

encrypting said anonymous patient identifier resulting in an encrypted anonymous 
patient identifier; and 

storing said encrypted anonymous patient identifier in said patient record.; 

adding said anonymous patient identifier to said medical report; 

removing said patient identification data from said medical report; and 

transmitting said medical report to a data repositoiy in response to said removing. 

16. (Currently Amended) A system for creating anonymity in collecting patient data, the 
system comprising: 

a network; and 

a host system in communication with said network, said host system including software 
to implement the method comprising: 
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receiving over said network a medical report for a patient including patient 
identification data; 

searching a patient record corresponding to said patient for an encrypted 
anonymous patient identifier wherein said patient record includes one or more of the 
patient identification data, said searching returns said encrypted anonymous patient 
identifier in response to locating said encrypted anonymous patient identifier and said 
searching returns a null value in response to not locating said encrypted anonymous 
patient identifier; 

creating and encrypting s aidran anonymous patient identifier corresponding to 
said patient and storing the -said encrypted anonymous patient identifier in the patient 
record if said searching returns said null value; 

unencrvpting said encrypted anonymous patient identifier; 

adding said unencrypted anonymous patient identifier to said medical report; 

removing said patient identification data from said medical report; and 

transmitting said medical report to a data repository over said network in response 
to said removing. 

17. (Original) The system of claim 16 wherein said network is an Internet. 

18. (Original) The system of claim 16 wherein said network is an intranet. 

19. (Currently Amended) The system of claim 16 wherein said creating, encrypting, and 
storing include: 

receiving a media access control address; 

applying a first linear transformation matrix to said media access control address 
resulting in a transformed media access control address; 

receiving a date/time; 
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applying a second linear transformation matrix to said date/time resulting in a 
transformed date/time; 

receiving an anonymity supplement; 

applying a third linear transformation matrix to said anonymity supplement resulting in a 
transformed anonymity supplement; 

concatenating said transformed media access control address, said transformed date/time 
and said transformed anonymity supplement resulting in said anonymous patient identifier; 

encrypting said anonymous patient identifier resulting in an -said encrypted anonymous 
patient identifier; and 

storing said encrypted anonymous patient identifier in said patient record. 

20. (Currently Amended) A computer program product for creating anonymity in 
collecting patient data, the product comprising: 

a storage medium readable by a processing circuit and storing instructions for execution 
by the processing circuit for: 

receiving a medical report for a patient including patient identification data; 

searching a patient record corresponding to said patient for an encrypted 
anonymous patient identifier wherein said patient record includes one or more of the 
patient identification data, said searching returns said encrypted anonymous patient 
identifier in response to locating said encrypted anonymous patient identifier and said 
searching returns a null value in response to not locating said encryp ted anonymous 
patient identifier; 

creating and encrypting s aid-an^anonymous patient identifier corresponding to 
said patient and storing the ~said encrypted anonymous patient identifier in the patient 
record if said searching returns said null value; 

unencrvptine said encrypted anonymous patient identifier; 
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adding said unencrypted anonymous patient identifier to said medical report; 

removing said patient identification data from said medical report; and 

transmitting said medical report to a data repository in response to said removing. 

21. (Currently Amended) The storage medium of claim 20 wherein said creating 
encrypting, and storing include: 

receiving a media access control address; 

applying a first linear transformation matrix to said media access control address 
resulting in a transformed media access control address; 

receiving a date/time; 

applying a second linear transformation matrix to said date/time resulting in a 
transformed date/time; 

receiving an anonymity supplement; 

applying a third linear transformation matrix to said anonymity supplement resulting in a 
transformed anonymity supplement; 

concatenating said transformed media access control address, said transformed date/time 
and said transformed anonymity supplement resulting in said anonymous patient identifier; 

encrypting said anonymous patient identifier resulting in an-said encrypted anonymous 
patient identifier; and 

storing said encrypted anonymous patient identifier in said patient record. 

22. (Currently Amended) An anonymous patient identifier encoding format for creating 
anonymity in collecting patient data, the format comprising: 

a unique system identifier; 
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a patient identifier including a linear transformation of a date/time componen t, said 
date/time component indicating when said patient data was created in said system, and an 
additional component to ensure uniqueness within said system; and wherein: 

said anonymous patient identifier is stored in an encrypted format on a patient 
record that includes patient identification data; and 

said anonymous patient identifier is stored in an unencrypted format on a medical 

report. 

23. (Original) The encoding format of claim 22 wherein said unique system identifier is 
a linear transformation applied to a media access control address. 

24. (Currently Amended) The encoding format of claim 22 wherein said linear 
transformation of a date/time component is calculated from a linear transformation applied to the 
concatenation of a month, day, year, hour, minute and secon d corresponding to when oaid patient 
was first admitted . 

25. (Original) The encoding format of claim 22 wherein said additional component 
includes a linear transformation applied to the concatenation of a rotating number that is 
incremented each time a new said anonymity supplement is created. 
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